Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030303a3a2f32392d3438203d3e20343031313131.roa
File:                     326131333a633030303a3a2f32392d3438203d3e20343031313131.roa (raw, json)
Hash identifier:          eIHoVX2pN1QbqS4m7Dy8KQBYeeiKYWDEIlFklcBnMHA=
Subject key identifier:   E4:DA:EC:45:9C:FB:78:86:52:65:32:A3:F1:DD:14:B1:03:15:D3:FF
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       37139D9CD505E20C207951C171BF4A3A8CC498B2
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030303a3a2f32392d3438203d3e20343031313131.roa
Signing time:             Fri 06 Sep 2024 09:47:49 +0000
ROA not before:           Fri 06 Sep 2024 09:42:49 +0000
ROA not after:            Fri 05 Sep 2025 09:47:49 +0000
asID:                     401111
IP address blocks:        2a13:c000::/29 maxlen: 48

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 14:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:13:9d:9c:d5:05:e2:0c:20:79:51:c1:71:bf:4a:3a:8c:c4:98:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Sep  6 09:42:49 2024 GMT
            Not After : Sep  5 09:47:49 2025 GMT
        Subject: CN=E4DAEC459CFB7886526532A3F1DD14B10315D3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:15:52:07:b8:b5:66:98:f4:64:ec:a9:4e:
                    ff:fd:6d:b4:4a:ff:d8:28:5a:c2:b4:4c:14:61:46:
                    27:72:12:d5:71:c4:94:3d:40:1b:e7:f0:3e:0b:2c:
                    1e:94:61:07:8f:b8:71:0c:7e:8e:10:b4:b7:a6:fc:
                    76:8b:fd:59:4c:b3:10:aa:f2:34:0f:c8:54:87:32:
                    a3:c1:99:02:d1:85:81:d1:d9:14:44:7f:d7:2b:aa:
                    9e:9d:95:32:67:42:b9:3d:d2:fe:b5:ef:cb:f7:ff:
                    d7:6b:b6:3a:e4:94:93:f5:ef:2d:b2:17:e5:65:bb:
                    f2:ee:22:a1:f0:0c:7a:a6:0a:1c:92:e2:be:d1:1b:
                    fb:ff:9f:39:6b:3f:e6:04:5a:a5:2f:25:4d:46:2b:
                    eb:dc:0f:82:a6:75:fc:bb:2a:5c:a5:16:ac:80:8f:
                    d0:f5:d1:d5:04:06:54:22:ff:59:1f:f0:4f:d1:85:
                    ac:34:62:ef:78:a0:ae:07:32:0c:2f:64:b6:b4:bd:
                    2a:d3:b1:2f:0d:4b:ca:07:a6:ac:b9:87:88:3b:b1:
                    21:02:ad:ba:d6:e6:dd:73:70:fe:30:ae:4d:63:b9:
                    8e:a3:3a:e7:cd:30:09:d3:7f:d1:33:73:19:b5:fe:
                    3b:24:0e:01:41:2c:0a:b6:0a:a1:6e:bf:cd:38:07:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DA:EC:45:9C:FB:78:86:52:65:32:A3:F1:DD:14:B1:03:15:D3:FF
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030303a3a2f32392d3438203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c000::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:70:bd:66:e8:68:7b:39:99:e1:46:6b:34:25:8d:70:1a:16:
         7b:d6:b5:e1:75:91:72:57:81:df:08:67:4e:99:08:a1:fa:bd:
         f0:a2:b8:fa:4c:9a:99:e9:5c:eb:66:31:b8:b0:00:78:ae:9f:
         e1:61:ef:11:df:92:21:9c:e3:da:4e:29:89:18:8e:23:e9:bf:
         28:72:53:30:02:03:b3:3e:b3:bb:d4:41:97:35:b3:0e:83:12:
         20:0b:b5:2e:90:96:29:53:36:a3:e9:59:b4:84:75:3d:58:e5:
         b8:07:4f:6a:97:e5:07:d2:87:66:08:4e:a0:b6:a8:9f:bd:45:
         07:8a:50:e5:07:0c:7d:a4:4a:fd:cd:8a:69:fe:f1:75:fa:99:
         3f:76:de:5e:77:44:e6:2b:6e:bc:1e:83:29:84:6e:0f:76:b3:
         a1:85:96:e5:40:d2:0f:ce:df:d2:48:e5:34:f3:39:7c:ee:32:
         76:55:00:9a:87:29:3a:4f:ab:4a:df:e3:b3:32:c8:59:9b:3c:
         0d:6f:e8:67:22:15:13:8e:b8:99:95:fc:69:5b:22:37:49:78:
         89:1c:54:f6:b3:17:ca:17:13:ab:92:7d:e0:66:bf:9f:1c:70:
         6c:5b:4c:aa:6d:27:cd:a6:1f:a8:21:05:e2:70:e0:2a:13:8f:
         47:7b:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:12:24 2024 by rpki-client on console-fra.rpki-client.org